Digital forensics is a branch of forensic science dealing with legal evidence found in computers and digital storage media. During the course of the investigation, investigators obtain digital evidence from computers, laptops, and other electronic devices. However, there may be times when a suspect, witness, or someone close to you does not want to work with an investigator to remove digital evidence. As a result, data content has been removed in many studies aimed at generating data from flash memory, hard drives, or other digital storage media. Unfortunately, we cannot guarantee that all deleted data can be restored in such a way. Most of them are partial and in some cases incomplete, so you can't open the file.

Digital evidence, also known as electronic evidence, provides valuable information to forensic research teams. All information present in digital devices is a source of digital evidence. This includes email, text messages, photos, graphics, documents, files, images, video clips, audio clips, databases, internet browsing history and more. Reliance on electronic media and IOT devices increases the risks and vulnerabilities associated with digital devices are also high. For example, cybercriminals can launch malware campaigns by infecting computers with viruses to promote malicious intent. The digital forensic professional can determine the identification and storage of evidence collected during detective diagnosis from digital devices.